CVE-2021-39806

HIGH

Android - Use-After-Free in label_backends_android.c closef

Title source: llm
STIX 2.1

Description

In closef of label_backends_android.c, there is a possible way to corrupt memory due to a double free. This could lead to local escalation of privilege during startup of servicemanager, if an attacker can trigger an initialization failure, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-215387420

References (1)

Core 1
Core References

Scores

CVSS v3 7.8
EPSS 0.0010
EPSS Percentile 1.3%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-415
Status published
Products (1)
google/android 12.1
Published Jun 15, 2022
Tracked Since Feb 18, 2026